Envoy on Ubuntu 24.04 LTS
by cloudimg
Envoy Proxy on Ubuntu 24.04 LTS by cloudimg
Envoy Proxy on Ubuntu 24.04 LTS by cloudimg
Envoy is a high-performance, cloud-native Layer 7 edge and service proxy. Originally built at Lyft and now a graduated CNCF project, it is the data plane behind Istio and many service meshes, and is widely used for API gateways, edge routing, load balancing, observability and zero-trust service-to-service traffic. The cloudimg image installs the official Envoy 1.31 binary as /usr/local/bin/envoy, runs it under a dedicated envoy system user via envoy.service enabled on boot, and ships a clear ready-to-run sample proxy configuration so the proxy is serving traffic from first boot. Backed by 24/7 expert support.
Cloud-Native L7 Proxy
API gateways, edge routing, load balancing, observability and zero-trust service-to-service traffic - the data plane behind Istio and many service meshes, with a rich filter and routing model.
Ready-to-Run
A sample config at /etc/envoy/envoy.yaml with an http_connection_manager listener on 0.0.0.0:10000 that routes through to a sample upstream cluster, with access logging, plus the Envoy admin interface on 127.0.0.1:9901 (/ready, /stats, /clusters).
Why Choose cloudimg?
- 24/7 Expert Support with guaranteed 24 hour response. Contact support@cloudimg.co.uk
- Production Ready from Launch Pre configured, security patched, and validated before publication
- Azure Native Integration Built with Azure Linux Agent, cloud init, and Gen2 Hyper V
What is Included
- Envoy 1.31 (Apache-2.0), the official upstream binary, at /usr/local/bin/envoy
- An envoy.service systemd unit, enabled and running on boot, under a dedicated envoy user
- A sample proxy config at /etc/envoy/envoy.yaml with an HTTP listener on 0.0.0.0:10000
- The Envoy admin interface on 127.0.0.1:9901 (/ready, /stats, /clusters) and access logging
Security and Networking
The admin interface on port 9901 is a debug/observability surface, bound to loopback only. The proxy listener uses port 10000, but the image does not open 10000 in any NSG - front the listener with your own TLS and NSG rules and adapt the sample config to your own routes, clusters, filters and authentication. The proxy ships no per-VM password.
Use Cases
An API gateway and edge proxy, service-mesh data plane, L7 load balancing and routing, and a self-hosted high-performance proxy you fully control.
Visit www.cloudimg.co.uk/guides/envoy-on-ubuntu-24-04-azure for the full user guide.
Envoy and Envoy Proxy are trademarks of The Linux Foundation / CNCF; cloudimg is an independent image publisher and is not affiliated with or endorsed by the Envoy project or the CNCF. All trademarks are the property of their respective holders.